clipbait 1.7.0 → 1.9.0

package/README.md

@@ -22,7 +22,7 @@ Opens Clipbait so you can copy your key, then installs a `/clipbait` slash comma
 ### Claude Code
 
 ```bash
-claude mcp add --transport http clipbait https://app.clipbait.ai/api/mcp/cbk_live_your_key_here
+claude mcp add --transport http clipbait https://app.clipbait.ai/api/mcp --header "X-API-Key: cbk_live_your_key_here"
 ```
 
 ### Cursor / Cline / Windsurf / manual
@@ -56,6 +56,9 @@ Seven tools are available to any agent:
 | `start_live_autoclip` | Auto-clip a **live** Twitch stream continuously (`channelUrl`, optional `cadenceMin`). Pro plan. |
 | `probe_video` | Get a video's duration before clipping (`url`). |
 | `download_clip` | Save a finished clip to your `~/Downloads/` folder and return the path (`jobId`, `clipIndex` 1-based). Max 500 MB. |
+| `list_social_accounts` | Show which accounts are connected for posting (X, TikTok, YouTube, Facebook). |
+| `schedule_post` | Schedule a clip to post on connected socials at a future time (`clipUrl`, `platforms`, `scheduledTime`, `caption`). |
+| `list_scheduled_posts` / `cancel_scheduled_post` | Review or cancel scheduled posts. |
 
 ## Terminal usage
 

package/index.js

@@ -13,6 +13,7 @@ const path = require("path");
 const CFG = path.join(os.homedir(), ".clipbait.json");
 const BASE = (process.env.CLIPBAIT_API_URL || "https://app.clipbait.ai/api").replace(/\/$/, "");
 const KEY_PAGE = "https://app.clipbait.ai/me";
+const MCP_URL = "https://app.clipbait.ai/api/mcp";
 
 // Shown whenever there's no usable key. Written so an AI agent can relay it
 // verbatim to the user and they'll know exactly what to do.
@@ -74,12 +75,14 @@ function prompt(question) {
 // reads MCP servers from ~/.claude.json under projects[cwd].mcpServers (local
 // scope) and, when present, a top-level mcpServers (user scope) — we write
 // both so it shows up regardless of which directory Claude opens in.
-function writeMcpConfig(mcpUrl) {
+function writeMcpConfig(key) {
   const cfgPath = path.join(os.homedir(), ".claude.json");
   let cfg;
   try { cfg = JSON.parse(fs.readFileSync(cfgPath, "utf8")); }
   catch { return false; } // no/unreadable config → caller prints manual steps
-  const entry = { type: "http", url: mcpUrl };
+  // Key travels in an X-API-Key header, not the URL path — keeps it out of the
+  // URL (and request logs). It still lives in the config file, same as any MCP.
+  const entry = { type: "http", url: MCP_URL, headers: { "X-API-Key": key } };
   cfg.mcpServers = cfg.mcpServers || {};
   cfg.mcpServers.clipbait = entry;
   const cwd = process.cwd();
@@ -104,14 +107,18 @@ argument-hint: <video-url> [what you want]
 ---
 You have the \`clipbait\` MCP tools connected. The user's request: $ARGUMENTS
 
-Do this, conversationally and fast:
-1. If there is no video URL in the request, ask for one (YouTube, Twitch VOD, Rumble, or Ganjing World). Otherwise don't ask for confirmation, just go.
-2. Read the intent and set params for \`generate_clips\`:
-   - vertical / shorts / tiktok / reels, or nothing specified => aspectRatio "9:16". landscape / widescreen / youtube => "16:9".
-   - if they mention a number of clips, use it as maxClips (1 to 20), otherwise 9.
-3. Call \`generate_clips\`, then poll \`get_job\` with the returned jobId every 30 seconds until status is "complete". Report progress between polls.
-4. When complete, list each finished clip as a numbered list: its hook and its URL.
-5. Then offer follow-ups and act on them by calling the tools again: regenerate at a different aspect ratio, pull more clips, or probe another video with \`probe_video\`.
+Guide them like a friendly assistant, conversationally and fast:
+1. Need a video URL — if none was given, ask for one (YouTube, Twitch VOD, Rumble, or Ganjing World).
+2. Set params for \`generate_clips\` from their intent (offer the choice if unclear, don't over-ask):
+   - aspect ratio: 9:16 (vertical / TikTok / Reels) is the default; 16:9 for YouTube / landscape.
+   - number of clips: use a number if they mention one (1–20), otherwise 9.
+3. Call \`generate_clips\`, then poll \`get_job\` with the returned jobId every ~30 seconds until status is "complete". Report progress between polls.
+4. When complete, list each finished clip as a numbered list: hook and URL.
+5. Then offer next steps and act on them by calling the tools:
+   - \`download_clip\` — save a clip to ~/Downloads.
+   - Post to social: call \`list_social_accounts\` to see connected platforms, then ask which platform(s), when to post (offer Today / Tomorrow / This weekend / a specific time), and the caption (offer to draft one). Show the plan (clip · platform · time · caption) and CONFIRM before calling \`schedule_post\` for each clip. Use \`list_scheduled_posts\` / \`cancel_scheduled_post\` to review or undo.
+   - Regenerate at a different aspect ratio, pull more clips, or \`probe_video\` another URL.
+Keep it snappy. Don't ask for confirmation to start clipping unless the URL is missing — but always confirm before posting to social.
 `;
 
 // Claude Desktop config path per-OS.
@@ -143,55 +150,66 @@ function writeDesktopConfig(key) {
 // Interactive one-command setup. Grabs the key (from arg / saved / by opening
 // the browser and prompting), installs the /clipbait command, and connects the
 // MCP server to Claude Code and Claude Desktop.
+// Print the exact config for the user/agent to apply, WITHOUT touching any
+// files. Used in non-interactive contexts (an agent ran this): silently
+// rewriting global AI-tool config there reads as a supply-chain attack, so we
+// stay transparent and let the caller apply it with full visibility.
+function printManualConfig(key) {
+  console.log("\nTo connect Clipbait, apply one of these (nothing was written — you're not in an interactive terminal):\n");
+  console.log("Claude Code:");
+  console.log(`    claude mcp add --transport http clipbait ${MCP_URL} --header "X-API-Key: ${key}"\n`);
+  console.log("Claude Desktop / Cursor / Cline / Windsurf — add to the MCP config:");
+  console.log(`    ${JSON.stringify({ mcpServers: { clipbait: { command: "npx", args: ["-y", "clipbait@latest", "mcp"], env: { CLIPBAIT_API_KEY: key } } } })}\n`);
+  console.log(`Tip: run \`npx clipbait@latest\` in a real terminal to apply this automatically.\n`);
+}
+
 async function runSetup(providedKey) {
+  const interactive = !!process.stdin.isTTY;
   let key = providedKey && providedKey.startsWith("cbk_") ? providedKey : loadKey();
 
   if (!key) {
+    if (!interactive) { console.error(NEED_KEY); process.exit(1); }
     console.log("\n⚡ Let's connect Clipbait to Claude.");
-    if (!process.stdin.isTTY) {
-      // No interactive terminal (e.g. an AI agent ran this). Print the full
-      // guidance so the agent can pass it straight to the user.
-      console.error(NEED_KEY);
-      process.exit(1);
-    }
     console.log(`\nOpening ${KEY_PAGE} so you can copy your API key…`);
     openBrowser(KEY_PAGE);
     key = (await prompt("\nPaste your API key (starts with cbk_) and press Enter:\n> ")).trim();
   }
+  if (!key || !key.startsWith("cbk_")) { console.error(NEED_KEY); process.exit(1); }
 
-  if (!key || !key.startsWith("cbk_")) {
-    console.error(NEED_KEY);
-    process.exit(1);
-  }
+  // Non-interactive (agent / pipe): don't silently modify global config. Print
+  // it and let the caller apply it with consent.
+  if (!interactive) { printManualConfig(key); return; }
+
+  // Interactive: announce exactly what will change BEFORE writing anything, so
+  // it never looks like a package quietly registering itself.
+  console.log("\n⚡ Clipbait setup will make these changes on this machine:");
+  console.log("  • save your API key to ~/.clipbait.json");
+  console.log("  • install a /clipbait slash command (~/.claude/commands/clipbait.md)");
+  console.log("  • register the Clipbait MCP server in Claude Code (~/.claude.json)");
+  console.log("  • register it in Claude Desktop, if installed\n");
 
   fs.writeFileSync(CFG, JSON.stringify({ apiKey: key }, null, 2));
-  const mcpUrl = "https://app.clipbait.ai/api/mcp/" + key;
 
-  // 1) Install the /clipbait slash command for Claude Code.
   const cmdDir = path.join(os.homedir(), ".claude", "commands");
   fs.mkdirSync(cmdDir, { recursive: true });
   fs.writeFileSync(path.join(cmdDir, "clipbait.md"), SLASH_COMMAND);
   console.log("✓ Installed the /clipbait command for Claude Code");
 
-  // 2) Register the MCP server with Claude Code. Prefer editing the config
-  // file directly (works everywhere); fall back to the `claude` CLI, then to
-  // printing manual steps.
-  if (writeMcpConfig(mcpUrl)) {
-    console.log("✓ Connected the Clipbait MCP server to Claude Code");
+  if (writeMcpConfig(key)) {
+    console.log("✓ Registered the Clipbait MCP server in Claude Code");
   } else {
     const { spawnSync } = require("child_process");
-    const r = spawnSync("claude", ["mcp", "add", "--transport", "http", "clipbait", mcpUrl], { stdio: "ignore" });
+    const r = spawnSync("claude", ["mcp", "add", "--transport", "http", "clipbait", MCP_URL, "--header", `X-API-Key: ${key}`], { stdio: "ignore" });
     if (!r.error && r.status === 0) {
-      console.log("✓ Connected the Clipbait MCP server to Claude Code");
+      console.log("✓ Registered the Clipbait MCP server in Claude Code");
     } else {
-      console.log("• Couldn't auto-connect the MCP server. Add it manually:");
-      console.log("    claude mcp add --transport http clipbait " + mcpUrl);
+      console.log("• Couldn't auto-register the MCP server. Add it manually:");
+      console.log(`    claude mcp add --transport http clipbait ${MCP_URL} --header "X-API-Key: ${key}"`);
     }
   }
 
-  // 3) Also configure Claude Desktop if installed (stdio server → download_clip).
   if (writeDesktopConfig(key)) {
-    console.log("✓ Connected Clipbait to Claude Desktop (quit + reopen it to load)");
+    console.log("✓ Registered Clipbait in Claude Desktop (quit + reopen it to load)");
   }
 
   console.log("\n🎬 Done! Restart Claude Code, then type:\n    /clipbait https://youtube.com/watch?v=…\n");
@@ -261,6 +279,19 @@ async function runMcpServer() {
       } catch (e) { return fail(e); }
     });
 
+  server.tool("list_social_accounts", "List which social accounts are connected for posting (X, TikTok, YouTube, Facebook). Check before scheduling.", {},
+    async () => { try { const d = await api("GET", "/auth/social/status"); const map = { twitter: "x", tiktok: "tiktok", youtube: "youtube", facebook: "facebook" }; const c = Object.entries(d || {}).filter(([, v]) => v && v.connected).map(([k]) => map[k] || k); return ok(c.length ? `Connected for posting: ${c.join(", ")}` : "No social accounts connected yet. Connect them at https://app.clipbait.ai/me."); } catch (e) { return fail(e); } });
+
+  server.tool("schedule_post", "Schedule a finished clip to post on connected social accounts at a future time. Get clip URLs from get_job first; confirm the platform is connected via list_social_accounts.",
+    { clipUrl: z.string(), platforms: z.array(z.enum(["x", "tiktok", "youtube", "facebook"])).min(1), scheduledTime: z.string().describe("Future ISO 8601 time"), caption: z.string().optional(), clipTitle: z.string().optional(), clipJobId: z.string().optional(), clipIndex: z.number().int().optional() },
+    async (a) => { try { const d = await api("POST", "/scheduled-posts", { clipUrl: a.clipUrl, platforms: a.platforms, scheduledTime: a.scheduledTime, caption: a.caption || "", clipTitle: a.clipTitle, clipJobId: a.clipJobId, clipIndex: a.clipIndex }); return ok(`Scheduled to ${a.platforms.join(", ")} for ${a.scheduledTime} (post ${d.scheduledPost?._id || "?"}).`); } catch (e) { return fail(e); } });
+
+  server.tool("list_scheduled_posts", "List the user's scheduled/posted social posts.", { status: z.enum(["pending", "posted", "failed", "cancelled"]).optional() },
+    async (a) => { try { const d = await api("GET", "/scheduled-posts" + (a.status ? `?status=${a.status}` : "")); const posts = (d.posts || []).slice(0, 20).map((p) => `${p._id} · ${p.status} · ${(p.platforms || []).map((x) => x.name).join(",")} · ${new Date(p.scheduledTime).toISOString()} · ${p.clipTitle || ""}`).join("\n"); return ok(posts || "No scheduled posts."); } catch (e) { return fail(e); } });
+
+  server.tool("cancel_scheduled_post", "Cancel a scheduled post before it goes live.", { postId: z.string() },
+    async (a) => { try { await api("DELETE", "/scheduled-posts/" + a.postId); return ok(`Cancelled scheduled post ${a.postId}.`); } catch (e) { return fail(e); } });
+
   await server.connect(new StdioServerTransport());
 }
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "clipbait",
-  "version": "1.7.0",
+  "version": "1.9.0",
   "description": "Clipbait CLI + MCP server — turn any video into viral clips, and auto-clip live streams, from your terminal or any AI agent.",
   "bin": { "clipbait": "index.js" },
   "type": "commonjs",